[
https://issues.apache.org/jira/browse/HIVE-15319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Matyas Orhidi updated HIVE-15319:
-
Description:
Having "hive.server2.authentication.kerberos.principal" property set as
"hive/somehost@SOME.REALM" [1] in HS2
- When connecting to the service using beeline, seemingly the realm part of the
service principal in the JDBC URL is not validated
- You can connect to HS2 using any realm e.g.
principal=hive/somehost@ANYOTHER.REALM [2]
[1]
hive.server2.authentication.kerberos.principal
hive/somehost@SOME.REALM
[2] 'jdbc:hive2://somehost:1/default;principal=hive/somehost@ANYOTHER.REALM'
was:
Having "hive.server2.authentication.kerberos.principal" property set as
"hive/somehost@SOME.REALM" [1] in HS2
- When connecting to the service using beeline, seemingly the realm part of the
service principal in the JDBC URL is not validated
- You can connect to HS2 using any realm e.g.
principal=hive/somehost@ANYOTHER.REALM [2]
***
[1]
hive.server2.authentication.kerberos.principal
hive/somehost@SOME.REALM
[2] 'jdbc:hive2://somehost:1/default;principal=hive/somehost@ANYOTHER.REALM'
> Beeline is not validating Kerberos realm
>
>
> Key: HIVE-15319
> URL: https://issues.apache.org/jira/browse/HIVE-15319
> Project: Hive
> Issue Type: Bug
>Reporter: Matyas Orhidi
>
> Having "hive.server2.authentication.kerberos.principal" property set as
> "hive/somehost@SOME.REALM" [1] in HS2
> - When connecting to the service using beeline, seemingly the realm part of
> the service principal in the JDBC URL is not validated
> - You can connect to HS2 using any realm e.g.
> principal=hive/somehost@ANYOTHER.REALM [2]
> [1]
> hive.server2.authentication.kerberos.principal
> hive/somehost@SOME.REALM
>
> [2]
> 'jdbc:hive2://somehost:1/default;principal=hive/somehost@ANYOTHER.REALM'
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
